Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jJECP1ygENn4CPyUyvMAhkCpR0o.roa
File: jJECP1ygENn4CPyUyvMAhkCpR0o.roa (raw, json)
Hash identifier: XAiW6dX/HUMj30HFW/5DdLqpoJANghzWMh//Z+WLy44=
Subject key identifier: 8C:91:02:3F:5C:A0:10:D9:F8:08:FC:94:CA:F3:00:86:40:A9:47:4A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B1D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jJECP1ygENn4CPyUyvMAhkCpR0o.roa
Signing time: Thu 02 Feb 2023 06:59:39 +0000
ROA not before: Thu 02 Feb 2023 06:59:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 119.77.128.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6941 (0x1b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 2 06:59:39 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8C91023F5CA010D9F808FC94CAF3008640A9474A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:77:b2:a3:f3:16:ed:ee:b6:81:15:29:08:
a4:0f:57:62:4f:fd:b8:b8:d5:56:0f:83:cf:aa:11:
82:0a:30:10:5c:6f:38:fd:c3:1e:92:8a:ed:9c:ce:
bc:7b:f4:9b:15:28:ee:30:61:dc:b4:cb:44:70:bc:
ca:4f:27:0c:67:a2:98:f4:66:73:05:05:f3:06:7c:
b5:f2:6d:e1:58:b9:34:c6:1f:ee:d5:68:1a:34:13:
c3:2f:7e:35:af:75:f4:bb:cb:3b:64:5b:4b:5d:41:
8e:61:6d:46:ce:ee:c1:99:5c:f1:76:c2:b3:61:e8:
c0:e0:bc:74:20:ea:bb:ef:57:f6:e1:7f:7b:ff:0e:
6b:38:a1:10:36:0f:be:b7:82:66:42:20:91:03:df:
17:da:11:f7:72:6c:64:13:99:c8:c6:6d:70:ef:e5:
aa:98:61:9b:df:7f:5e:97:25:a9:2e:fb:cd:db:5a:
b9:53:a8:12:c0:57:01:d9:aa:67:21:76:68:c3:79:
3c:f5:86:90:a6:1b:b5:07:64:77:63:60:bd:1b:b0:
ca:b4:52:d9:84:d0:14:b6:5e:15:01:66:52:6f:e9:
ea:48:26:5b:70:e6:49:f0:94:2c:46:9b:d0:cf:a4:
98:68:f3:c6:79:4a:3e:6b:4d:cb:03:83:9c:a4:e3:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:91:02:3F:5C:A0:10:D9:F8:08:FC:94:CA:F3:00:86:40:A9:47:4A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jJECP1ygENn4CPyUyvMAhkCpR0o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.128.0/17
Signature Algorithm: sha256WithRSAEncryption
82:c6:9f:fe:80:95:b6:d4:94:38:c6:e6:f7:59:86:5c:cf:6f:
d2:63:f1:15:75:a7:49:4c:68:ce:e2:fc:6a:47:69:b9:48:be:
0a:14:7e:5f:d9:13:c3:03:9f:30:b2:e6:d6:db:a9:fe:b6:30:
4e:8a:05:4f:21:f1:6d:2d:90:36:2c:61:83:c0:e8:ae:dd:70:
fb:56:4a:87:e8:48:b8:e4:dd:f1:8a:f8:09:c3:2b:d9:fd:41:
a0:08:da:b0:b4:7f:f5:d6:2a:ab:3e:af:e8:ef:4d:b8:85:ca:
78:c1:5a:80:3a:ba:7d:58:ff:a7:23:3d:60:4a:a3:b7:d8:ef:
67:69:9e:31:1d:6d:5c:3d:69:a2:4e:eb:ae:73:1a:7b:31:91:
45:21:d8:10:b5:ff:0e:4e:e9:3b:19:11:c3:94:87:d9:57:5c:
c4:28:b4:e1:da:4d:3c:47:ab:a9:04:85:88:52:45:27:2f:f4:
5a:6a:3c:45:13:6e:7c:01:6f:83:8d:1f:d9:d9:bb:85:69:b0:
35:68:a2:36:c7:e6:65:19:80:8d:76:50:61:29:5a:96:28:eb:
a0:48:76:cf:30:15:37:69:73:8f:f2:86:a2:ee:37:5e:2d:2e:
70:4c:fe:0a:19:8c:22:d9:00:5b:31:87:15:1b:db:c7:90:35:
d4:08:f8:c3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzAyMDIw
NjU5MzlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDhDOTEwMjNGNUNBMDEw
RDlGODA4RkM5NENBRjMwMDg2NDBBOTQ3NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAD3eyo/MW7e62gRUpCKQPV2JP/bi41VYPg8+qEYIKMBBcbzj9
wx6Siu2czrx79JsVKO4wYdy0y0RwvMpPJwxnopj0ZnMFBfMGfLXybeFYuTTGH+7V
aBo0E8MvfjWvdfS7yztkW0tdQY5hbUbO7sGZXPF2wrNh6MDgvHQg6rvvV/bhf3v/
Dms4oRA2D763gmZCIJED3xfaEfdybGQTmcjGbXDv5aqYYZvff16XJaku+83bWrlT
qBLAVwHZqmchdmjDeTz1hpCmG7UHZHdjYL0bsMq0UtmE0BS2XhUBZlJv6epIJltw
5knwlCxGm9DPpJho88Z5Sj5rTcsDg5yk40uFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjJECP1ygENn4CPyUyvMAhkCpR0owHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2pKRUNQMXlnRU5uNENQeVV5
dk1BaGtDcFIwby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3
TYAwDQYJKoZIhvcNAQELBQADggEBAILGn/6AlbbUlDjG5vdZhlzPb9Jj8RV1p0lM
aM7i/GpHablIvgoUfl/ZE8MDnzCy5tbbqf62ME6KBU8h8W0tkDYsYYPA6K7dcPtW
SofoSLjk3fGK+AnDK9n9QaAI2rC0f/XWKqs+r+jvTbiFynjBWoA6un1Y/6cjPWBK
o7fY72dpnjEdbVw9aaJO665zGnsxkUUh2BC1/w5O6TsZEcOUh9lXXMQotOHaTTxH
q6kEhYhSRScv9FpqPEUTbnwBb4ONH9nZu4VpsDVoojbH5mUZgI12UGEpWpYo66BI
ds8wFTdpc4/yhqLuN14tLnBM/goZjCLZAFsxhxUb28eQNdQI+MM=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org